PwnPad

Perfect for doing Capture-The-Flag challenges and Pentesting on any platform, without needing a clunky, fat, resource hungry virtual machine. PwnPad provides a wide array of tools at your very own fingertips, powered by Arch Linux!

Got OSCP with this btw 👍🏼

Contents

1. Download
2. Usage
3. Features
4. Tools
5. License

Requirements

• Docker installed (Docker Desktop for Windows & Mac)
• Nerd Fonts installed

Homebrew (macOS)

brew install pwnpad/tap/pwnpad

Wget (Linux)

sudo wget https://raw.githubusercontent.com/pwnpad/pwnpad/master/p2 \
    -O /usr/local/bin/p2 && \
sudo wget https://raw.githubusercontent.com/pwnpad/pwnpad/master/_p2-autocomplete.zsh \
    -O /usr/local/share/zsh/site-functions/_p2

Git

PwnPad can also be downloaded directly from GitHub

git clone https://github.com/pwnpad/pwnpad.git

Getting Images

# Build image locally (Only works if you installed through cloning)
p2 build            # Basic image
p2 build -i lite    # Lite image
p2 build -i bare    # Bare image (Extra image without the user interface)

# Or pull from Docker Hub
docker pull platypew/pwnpad:lite   # Lite image
docker pull platypew/pwnpad:latest # Basic image
docker pull platypew/pwnpad:bare   # Bare image (Extra image without the user interface)

Quick Start

# Using Base Image
p2 attach ctf

# Using Lite Image
p2 attach -i lite ctf

# Using Bare Image
# Using the privileged flag is not recommended, however, it solves a lot of manual adding of capabilities
docker run --privileged -it platypew/pwnpad:bare <tool name>

General

You might want to alias p2 in your bashrc/zshrc

$ p2
USAGE:
  p2 <SUBCOMMAND>

SUBCOMMAND:
  build     Build Docker image
  attach    Attach into container
  rm        Remove container and its volumes
  kill      Stop container from running
  volume    Enter into container's volume
  ls        List pwnpad instances
  update    Update image to the latest build

HELP:
  p2 build -h
  p2 attach -h
  p2 rm -h

1. It's powered by Arch, giving you access to the AUR and Blackarch (with systemd enabled)
2. It runs on Windows (WSL2), MacOS and Linux
3. It's built for both amd64 and arm64
4. It's super lightweight taking over 3GB of space
5. You can spawn as many independent instances as you want and remove them just as quick
6. Supports X11 forwarding
7. Supports VNC and noVNC with i3
8. Customised Neovim and Zsh so you look super cool using it

Integrated Features

SSH

You can ssh into PwnPad by doing these steps.

Proxy

You can proxy your traffic through PwnPad by doing these steps.

Publish Port to Public

You can use ngrok to publish a port to the public.

Toggle ASLR

You can turn ASLR on and off.

Enable noVNC (not available in lite image)

Create intel environment (only in arm64 image)

Creates a chroot environment to run purely intel binaries. You can still run intel binaries that uses only glibc within the regular context.

Included Infosec Tools

Included QoL Tools